From 31bbdacbf330c28c5ebc900864ccd148ea1b23e0 Mon Sep 17 00:00:00 2001
From: Evan Prodromou <evan@status.net>
Date: Sat, 7 Nov 2009 18:51:57 -0500
Subject: add a method to Action to check session token

---
 lib/action.php | 18 ++++++++++++++++++
 1 file changed, 18 insertions(+)

diff --git a/lib/action.php b/lib/action.php
index 1b2f73752..78ca9137a 100644
--- a/lib/action.php
+++ b/lib/action.php
@@ -1101,4 +1101,22 @@ class Action extends HTMLOutputter // lawsuit
     {
         return Design::siteDesign();
     }
+
+    /**
+     * Check the session token.
+     *
+     * Checks that the current form has the correct session token,
+     * and throw an exception if it does not.
+     *
+     * @return void
+     */
+
+    function checkSessionToken()
+    {
+        // CSRF protection
+        $token = $this->trimmed('token');
+        if (empty($token) || $token != common_session_token()) {
+            $this->clientError(_('There was a problem with your session token.'));
+        }
+    }
 }
-- 
cgit v1.2.3-54-g00ecf